Vulnerability · Published Apr 9, 2021 · Assigned by GitHub_M
CVE-2021-21433Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation
Critical 9.9
In plain English
A critical-severity code injection in Discord-Recon from DEMON1A. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.3% (higher than 89% of all known vulnerabilities).
Severity (CVSS 3.1)9.9Critical
Exploit odds (30 days)3.3%top 11.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| DEMON1A | Discord-Recon | <= 0.0.1 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H